Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/82BBF838121811F19F2C98CEDAE4EC9C.roa
File: 82BBF838121811F19F2C98CEDAE4EC9C.roa (raw, json)
Hash identifier: yPRlzkHrFdNIQdXcpv3GRKNlCjEEn8sq1EtHXjVhSSA=
Subject key identifier: 74:D0:C5:F3:AB:E1:3F:BD:B7:57:BD:BD:3E:21:EA:B6:5D:94:62:75
Certificate issuer: /CN=F363BA19AF/serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Certificate serial: 1063
Authority key identifier: 6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/82BBF838121811F19F2C98CEDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:06:31 +0000
ROA not before: Wed 25 Feb 2026 07:06:27 +0000
ROA not after: Thu 25 Feb 2027 07:06:27 +0000
asID: 996
IP address blocks: 102.135.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.mft
rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:07:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4195 (0x1063)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F363BA19AF, serialNumber=6AEA24B099C32B22E4E48BB9F26CF578BEF6BFF3
Validity
Not Before: Feb 25 07:06:27 2026 GMT
Not After : Feb 25 07:06:27 2027 GMT
Subject: CN=699e9f77-c689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:2c:b9:81:2c:f9:2f:40:07:d4:15:83:3e:
d5:d0:3e:5c:96:75:c7:51:cd:b9:3e:08:ba:44:db:
f5:0e:9b:88:04:3a:86:61:6b:7a:4e:f8:a0:1a:a4:
3d:1a:46:18:be:59:8d:e4:08:58:be:da:2c:50:e1:
46:82:9c:73:e8:88:76:b9:16:aa:98:6a:1c:77:52:
31:12:94:77:3d:1b:29:da:d7:b8:86:5f:36:02:7c:
57:35:23:4a:e8:ee:81:15:c7:2a:4c:d4:3f:fd:8b:
08:85:5d:52:e8:a9:6a:b3:a6:77:8a:34:d4:b8:2f:
b4:82:d2:91:83:84:4c:aa:32:4a:c1:67:3a:a3:63:
7a:33:db:45:73:49:66:9e:10:6b:bd:52:17:93:7a:
2b:0f:ec:76:53:dd:5d:18:d0:2f:8f:20:fb:f9:86:
c1:1e:b6:b4:08:41:ac:e2:c5:39:e2:ba:d9:7d:cb:
cc:ea:d8:69:a0:ea:dc:b4:40:30:ee:35:15:80:62:
ce:f4:55:1b:fa:49:e4:ac:4f:c1:e3:94:38:1c:85:
24:8a:f8:31:1e:3e:ee:1c:9b:9d:56:3a:a7:20:2d:
4e:12:ff:68:c6:f6:74:23:27:d8:c5:6d:f9:32:1a:
e5:e1:78:af:7c:3c:7b:27:38:63:07:cc:63:b9:8b:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:C5:F3:AB:E1:3F:BD:B7:57:BD:BD:3E:21:EA:B6:5D:94:62:75
X509v3 Authority Key Identifier:
keyid:6A:EA:24:B0:99:C3:2B:22:E4:E4:8B:B9:F2:6C:F5:78:BE:F6:BF:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/auoksJnDKyLk5Iu58mz1eL72v_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/auoksJnDKyLk5Iu58mz1eL72v_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363BA19/0E7F1DF6962A11EC8671E6E05A40D577/82BBF838121811F19F2C98CEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.135.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c8:d0:9f:05:e5:8e:0c:10:90:bf:f8:7c:9c:0b:6a:48:f7:
10:24:25:da:71:e9:09:99:d7:62:b1:46:ce:3d:9c:bc:ed:0d:
bc:20:5a:88:29:23:02:4e:b9:20:0c:62:11:74:c2:e0:5e:9b:
b4:98:a1:99:e0:b9:b7:a3:ec:54:47:dd:ae:0d:a8:3b:d2:ab:
1e:d5:80:27:a3:7a:92:f4:8c:c0:ab:7f:5e:af:f0:fe:16:d2:
1c:b7:c3:3b:20:23:91:f9:00:e4:34:36:c1:49:68:2d:d2:12:
10:4b:ef:9d:08:fd:64:b2:df:bb:52:5e:cb:72:1b:9b:75:a8:
04:2f:6e:9f:37:4a:fe:00:ee:79:02:f1:1d:b5:dc:84:31:e3:
1d:a9:39:d9:22:01:d4:0c:bd:0d:cb:7e:00:50:95:6d:b8:c0:
c8:95:3c:7d:87:89:db:3d:30:89:f8:51:12:98:7e:c1:40:a0:
0e:0c:e7:5f:ad:09:04:92:73:87:c7:27:76:f6:32:b1:33:6a:
da:dc:ef:8f:a2:38:d7:71:08:ff:85:36:36:02:b0:cf:f3:6c:
89:b9:e7:35:0b:bc:07:ad:f7:fb:f4:99:9a:7d:66:55:51:63:
18:57:95:d5:75:c1:8c:9d:2a:94:a6:77:13:d3:a8:bd:8e:53:
e0:8f:70:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:19 2026 by rpki-client